joyent/node — Issue #2247: HTTPS: Option to assert authorized before sending request data. (possible security problem)
Author: cjavapro
Created: 2011-12-02 16:05:50+00:00
State: open

Original post: http://stackoverflow.com/questions/8304084/node-js-assert-authorized-before-sending-data-over-https

I understand I need to check the `response.authorized` field to see if the SSL/TLS connection is secure and to the correct server.

Trouble is, I have to send a request before I can check that field. I need a way to assert the connection is authorized *before* sending any (potentially private) data.

Granted, this does not pose a security threat all by its lonesome, but it does remove a layer of security that is usually expected of HTTPS.